Differentiated kdc lists
rra at stanford.edu
Wed Dec 8 21:42:40 EST 2004
Henry B Hotz <hotz at jpl.nasa.gov> writes:
> I have to support clients behind firewalls that may air-gap. I'm
> providing slave kdc's in those areas, so functionality will exist, but.
> . .
> It would be nice if I could use a single krb5.conf and somehow specify
> "if you're over here, use these kdc's". That e.g. allows keeping the
> krb5.conf file in AFS, but also just simplifies writing set-up
Can you do this with DNS SRV records?
Russ Allbery (rra at stanford.edu) <http://www.eyrie.org/~eagle/>
More information about the krbdev